Security teams need to know about new and actively-exploited vulnerabilities the moment they land — not on a weekly digest. The NVD and CISA KEV feeds are public but awkward to poll and join. Teams want a deduplicated CVE feed with severity and exploitation status as structured data.
What you get
Each CVE as JSON: CVE ID, description, CVSS score and severity, affected products (CPE), published and modified dates, and a CISA-KEV exploited flag.
Sample input
{
"minCvss": 7.0,
"onlyKev": false,
"daysBack": 7
}Sample output
{
"cveId": "CVE-2026-12345",
"cvss": 9.8,
"severity": "CRITICAL",
"kevExploited": true,
"published": "2026-06-02",
"summary": "Remote code execution in ExampleService..."
}Run it
Open the actor on Apify → Pay-per-result, $5/month free credit.
Bundle: related actors. Hub: cluster guide.
FAQ
Where does the data come from?
The public NVD (NIST) feed joined with the CISA Known Exploited Vulnerabilities catalog.
Can I filter by severity?
Yes — filter by minimum CVSS and limit to KEV-listed CVEs.
Can it run on a schedule?
Yes — schedule on Apify or trigger via n8n for a recurring feed.
How is it priced?
Pay-per-result on Apify with $5/month free credit.